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A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 
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earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1)^3 Responsive to communication(s) filed on 15 June 2001 . 
2a)D This action is FINAL. 2b)S This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) |3 Claim(s) 1-18 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) ^ Claim(s) 1-18 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10)D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 

Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 
11 )□ The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 
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DETAILED ACTION 

1 . This office action is responding to the application filed on June 15th, 2001 . 

2. Claims 1-18 are pending. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

3. Claims 1-18 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Hind et al, US Patent No. 6772331 B1 , hereinafter "Hind", in view of Butt et al, US Patent 
No. 6754829B1, hereinafter "Butt". 

4. As per claims 1-2, and 13, Hind teaches "A branding process to establish 
cryptographically secured interaction among networked computing devices within a trust 
group on an open multi-access network, comprising: securely networking a security-un- 
initialized device with a branding device via a secured network medium (Col 9 lines 25- 
40); transmitting a branding certificate from the branding device to the security-un- 
initialized device via the secured network medium (Col 9 lines 25-40), the branding 
certificate instructing that the security-un-initialized device trust the branding device (Col 
9 lines 15-60, creating a trust between the devices), the branding certificate further 
containing key data for verifying certificates provided by other devices on the open 
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multi-access network to the security-un-initialized device are authenticated by the 
branding device (Col 9 lines 35-60); transmitting a trust group membership certificate 
from the branding device to the security-un-initialized device via the secured network 
medium, the trust group membership certificate authenticating that the security-un- 
initialized device is a member of the trust group (Col 10 lines 18-29); and initializing a 
security resolver of the security-un-initialized device to use the key data of the branding 
certificate to authenticate other devices interacting with the security-un-initialized device 
on the open multi-access network are in the trust group (Col 10 lines 18-29, and Col 1 1 
line 5 to Col 12 line 20), and to provide the trust group membership certificate to such 
other devices as authentication that the security-un-initialized device is a member of the 
trust group (Col 10 lines 18-29, such that at least some interaction via the open multi- 
access network with the security-un-initialized device is cryptographically secured to 
only other devices in the trust group (Col 9 lines 15-60)". 

However, Hind does not specifically disclose the certificate is a trust group membership 
certificate. Hind only disclose that the certificate is associated with the access control 
groups and the certificate includes user group associations, access control groups 
fields. 

Nevertheless, Butt discloses the "Certificate-Based Authentication System for 
Heterogeneous Environments", which includes issuing the certificate has group 
membership to access a certain resource (Col 3 line 45 to Col 4 line 12). 
Therefore, it would have been obvious at the time of the invention was made for one 
having ordinary skill in the art to realize that the Hind's certificate can also be 
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5. As per claim 3, Hind and Butt teach "The branding process of claim 2 wherein 
securely networking the security-un-initialized and branding devices comprises 
networking the devices via a limited access network interface of the security-un- 
initialized device that is separate from the security-un-initialized device's interface to the 
open multi-access network" (Col 1 1 lines 5-65). 

6. As per claim 4, Hind and Butt teach "The branding process of claim 3 wherein the 
limited access network interface is of a direct device-to-device wired networking 
medium (Col 1 line 65 to Col 2 line 1). 

7. As per claim 5, Hind and Butt teach "The branding process of claim 3 wherein the 
limited access network interface is of a directional wireless networking medium" in (Col 

1 line 55 to Col 2 line 10). 

8. As per claim 6, Hind and Butt teach "The branding process of claim 2 wherein 
securely networking the security-un-initialized and branding devices comprises: placing 
transmitter/receivers of the security-un-initialized and branding devices for an omni- 
directional wireless networking medium into a wave guide and/or Faraday cage; and 
networking the devices with the wave guide and/or Faraday cage via the omni- 
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directional wireless networking medium" in (Col 1 line 55 to Col 2 line 10). 

9. As per claim 7, Hind and Butt teach "The branding process of claim 2 further 
comprising: transmitting a principal identifier from the branding device to the security- 
un-initialized device, the principal identifier providing a cryptographically secured identity 
to the security-un-initialized device, the principal identifier containing a public/private key 
pair; and using the public/private key pair to encrypt interaction of the security-un- 
initialized device with said other devices authenticated to be in the trust group" in (Col 
11 lines 5-65). 

10. As per claim 8, Hind and Butt teach "The branding process of claim 7 wherein the 
principal identifier further contains a name for the security-un-initialized device, the 
process further comprising identifying the security-un-initialized device to human 
operators using the name" in (Col 12 lines 45-65). 

11. As per claim 9, Hind and Butt teach "The branding process of claim 8 further 
comprising prompting a human user of the branding device to enter the name upon 
performing the branding process on the security-un-initialized device" in (Col 12 lines 
45-65). 

12. As per claim 10, Hind and Butt teach "The branding process of claim 2 further 
comprising initially distributing the security-un-initialized device in a retail channel prior 
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to having the branding process performed on the security-un-initialized device" in (Col 5 
lines 25). 

1 3. As per claim 1 1 , Hind and Butt teach "The branding process of claim 1 0 further 
comprising upon completion of initializing the security resolver, disallowing the security- 
un-initialized device from having the branding process again performed on the security- 
un-initialized device until the now initialized security of the security-un-initialized device 
is reset" in (Col 13lines 35-43). 

14. As per claim 12, Hind and Butt teach "The branding process of claim 10 further 
comprising upon completion of initializing the security resolver, allowing the branding 
process to be performed only via a limited access network interface of the security-un- 
initialized device" in (Col 4 line 53 to Col 5 line 5). 

15. As per claim 14, Hind and Butt teach "The networked computing device of claim 
13 further comprising: a limited access networking interface; and the security initializer 
further operational to accept the branding public key when received from the branding 
device only via the limited access networking interface" in (Col 1 1 lines 5-45). 

16. As per claim 15, Hind and Butt teach "The networked computing device of claim 
13 further comprising: the security initializer further operational to accept the branding 
public key when received from the branding device via the network interface when in an 
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initial unbranded state; and a branding reset operational upon activation to return the 
security initializer to the initial unbranded state" in (Col 13 lines 35-43). 

17. As per claim 16, Hind and Butt teach "The networked computing device of claim 
13 further comprising: a branding mode activator operational to place the networked 
computing device in a branding mode; and the security initializer further operational to 
accept the branding public key when received from the branding device via the network 
interface when in the branding mode" in (Col 1 1 lines 5-45). 

18. As per claim 17, Hind and Butt teach "The networked computing device of claim 
13 further comprising: the security resolver further operational when initialized with a 
trust group membership certificate to provide the trust group membership certificate to 
other devices via the network interface to attest to membership of the networked 
computing in the trust group; and the security initializer further operational to receive the 
trust group membership certificate from the branding device while securely networked to 
the networked computing device, and further operational to initialize the security 
resolver with the trust group membership certificate" in (Col 9 lines 15-65, and Col 10 
lines 24-30). 

19. As per claim 18, Hind and Butt teach "The networked computing device of claim 
13 further comprising: the security resolver further operational when initialized with a 
public/private key pair to encrypt interaction via the network interface with other devices 
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authenticated as in the trust group using the public/private key pair; and the security 
initializer further operational to receive the public/private key pair from the branding 
device while securely networked to the networked computing device, and further 
operational to initialize the security resolver with the public/private key pair" in (Col 1 1 
lines 5-65). 



Response to Arguments 

20. Applicant's arguments, see Amendment, filed 07/27/05, with respect to the 
rejection(s) of claim(s) 1-18 under 35 USC 102 (e) have been fully considered and are 
persuasive. Therefore, the rejection has been withdrawn. However, upon further 
consideration, a new ground(s) of rejection is made in view of Hind and Butt. 

21 . Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Linh LD Son whose telephone number is 571-272-3856. 
The examiner can normally be reached on 9-6 (M-F). 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Vu can be reached on 571-272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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Examiner 
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